Results 1 to 1 of 1
hello
I need to do a filter in tshark that returns all the tcp destination ports for all packets with just the tcp SYN flag active.
Something like this
tshark ...
- 10-01-2010 #1Just Joined!
- Join Date
- Jul 2010
- Posts
- 4
tshark help
hello
I need to do a filter in tshark that returns all the tcp destination ports for all packets with just the tcp SYN flag active.
Something like this
tshark -r infile.pcap -T fields -e tcp.dstport && tcp[13]=2 > outfile.txt
I try this one but the outfile comes empty.
Can someone help me??
thanks.


Reply With Quote